Nextcloud under Virtualmin for Associations: Setting Up External Storage via SMB, SFTP, and S3 Without Cloud Dependency in a GDPR-Compliant Way and Centrally Managing Quotas and Access Rights

Nextcloud under Virtualmin for Associations: External Storage Connection Without Cloud Dependency

As an association, you often face the challenge of finding a cost-effective and privacy-compliant solution for file management. Nextcloud offers an excellent alternative to commercial cloud services. In combination with Virtualmin – a powerful control panel for Linux servers – you can build a fully self-hosted environment that does not share data with third parties. In this article, we will show you how to install Nextcloud under Virtualmin and connect external storage via SMB, SFTP, and S3 to centrally manage quotas and access rights.

Why Nextcloud on Your Own Server?

The GDPR requires associations to handle personal data carefully. Public cloud services often store data on servers outside the EU or are not subject to European law. With your own Nextcloud instance, you retain full control. Virtualmin enables you to easily manage domains, email accounts, and databases – ideal for associations with limited IT resources.

For setup, you only need a virtual server or a web hosting package with sufficient storage. Make sure PHP and MySQL are available. Virtualmin supports you with the installation of Nextcloud via the installation script.

Installing Nextcloud under Virtualmin

The installation is straightforward: after logging into Virtualmin, select the "Install Scripts" option and search for Nextcloud. Follow the instructions. Create an administrator account and choose a database. After installation, you can log in to your Nextcloud instance.

An important step is configuring the trusted domains in config.php so that your association's domain is accepted. You should also enforce HTTPS to encrypt transmission. You can set up an SSL certificate for free via Let's Encrypt in Virtualmin.

External Storage Connection: SMB, SFTP, and S3

Nextcloud offers the ability to integrate external storage. This is particularly useful if you already have a NAS (Network Attached Storage) or want to use storage from another provider without giving up data sovereignty. The connection is made via the "External Storage" app, which is enabled by default.

SMB/CIFS

SMB (Server Message Block) is ideal for integrating Windows shares or NAS drives. In the settings, enter the host, share, username, and password. Make sure that the web server user (e.g., www-data) has access to the directory. If needed, you can enable the "SMB/CIFS with libsmbclient" option to use advanced features.

SFTP

SFTP is suitable for connecting to remote servers via SSH. You need the credentials (host, port, username, password, or SSH key). Nextcloud supports both password and key authentication. For associations that already use another server, this is a secure method to synchronize files.

S3

S3-compatible storage (e.g., from Hetzner, IONOS, or MinIO) can also be integrated. Enter the endpoint, bucket name, access key, and secret key. Make sure that the S3 provider is GDPR-compliant and stores data in the EU. This way, you can use cost-effective storage without giving up control.

After integration, the external storage appears as a folder in the Nextcloud file view. You can use it like local storage.

Centrally Managing Quotas and Access Rights

Nextcloud offers extensive options for controlling quotas and access rights. As an administrator, you can set a storage limit for each user or group. To do this, go to user management and assign quotas. You can also define quotas for external storage if the provider supports it.

Access rights can be managed via groups and shares. You can specify who can see and edit which folders. For associations, it makes sense to create groups such as "Board," "Members," or "Projects" and distribute rights accordingly.

Pay special attention to rights for external storage. You can set whether users may upload, download, or delete files. Sharing externally can also be restricted.

Ensuring GDPR Compliance

To work in a GDPR-compliant manner, you must observe several points:

• Host your Nextcloud on servers in the EU (ideally in Germany).
• Use encryption (HTTPS, and possibly server-side encryption).
• Conclude a data processing agreement (DPA) with your hosting provider.
• Regulate access rights restrictively and log accesses.
• Inform your members about data processing and obtain consent where necessary.

With a virtual server from DezHost, you are on the safe side: the data centers are located in Germany, and you can retain full control over your data.

Conclusion: Independence and Control for Associations

The combination of Nextcloud and Virtualmin enables associations to build a powerful and privacy-compliant file management system. By connecting external storage via SMB, SFTP, and S3, you remain flexible and can use existing resources. Central management of quotas and access rights simplifies administration. With a reliable hosting partner like DezHost, nothing stands in the way of success.

If you need support with setup, check out our knowledge base or contact our support.